CVE-2004-1458

The CSAdmin web administration interface for Cisco Secure Access Control Server ACS 3.22 build 15 allows remote attackers to cause a denial of service hang via a flood of TCP connections to port 2002...

CVE-2004-1461

Cisco Secure Access Control Server ACS 3.23 and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address...

CVE-2004-1459

Cisco Secure Access Control Server ACS 3.2, when configured as a Light Extensible Authentication Protocol LEAP RADIUS proxy, allows remote attackers to cause a denial of service device crash via certain LEAP authentication requests...

CVE-2004-1461

Cisco Secure Access Control Server (ACS) 3.2(3) and earlier is vulnerable to an authentication bypass: during GUI login a separate unauthenticated TCP connection is spawned on a random port, and an attacker on the same IP can connect to that port to bypass authentication. This issue is documented...

CVE-2004-1460

CVE-2004-1460 affects Cisco Secure Access Control Server (ACS) 3.2(3) and earlier. When configured with an anonymous bind in Novell Directory Services (NDS), and authenticating NDS users with NDS, remote attackers can gain unauthorized access to AAA clients by using a blank password. The NVD note...

CVE-2004-1460

Cisco Secure Access Control Server ACS 3.23 and earlier, when configured with an anonymous bind in Novell Directory Services NDS and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password...

CVE-2004-1461: Undefined Security Weakness

Cisco Secure Access Control Server ACS 3.23 and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address...

CVE-2004-1459: Undefined Security Weakness

Cisco Secure Access Control Server ACS 3.2, when configured as a Light Extensible Authentication Protocol LEAP RADIUS proxy, allows remote attackers to cause a denial of service device crash via certain LEAP authentication requests...

CVE-2004-1460: Undefined Security Weakness

Cisco Secure Access Control Server ACS 3.23 and earlier, when configured with an anonymous bind in Novell Directory Services NDS and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password...

CVE-2004-1458: Undefined Security Weakness

The CSAdmin web administration interface for Cisco Secure Access Control Server ACS 3.22 build 15 allows remote attackers to cause a denial of service hang via a flood of TCP connections to port 2002...

CVE-2004-1099

Cisco Secure Access Control Server for Windows ACS Windows and Cisco Secure Access Control Server Solution Engine ACS Solution Engine 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and...

CVE-2004-1459

Cisco Secure Access Control Server ACS 3.2, when configured as a Light Extensible Authentication Protocol LEAP RADIUS proxy, allows remote attackers to cause a denial of service device crash via certain LEAP authentication requests...

CVE-2004-1460

Cisco Secure Access Control Server ACS 3.23 and earlier, when configured with an anonymous bind in Novell Directory Services NDS and authenticating NDS users with NDS, allows remote attackers to gain unauthorized access to AAA clients via a blank password...

CVE-2004-1461

Cisco Secure Access Control Server ACS 3.23 and earlier spawns a separate unauthenticated TCP connection on a random port when a user authenticates to the ACS GUI, which allows remote attackers to bypass authentication by connecting to that port from the same IP address...

CVE-2004-1458

The CSAdmin web administration interface for Cisco Secure Access Control Server ACS 3.22 build 15 allows remote attackers to cause a denial of service hang via a flood of TCP connections to port 2002...

CVE-2004-1099

Cisco Secure Access Control Server for Windows ACS Windows and Cisco Secure Access Control Server Solution Engine ACS Solution Engine 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and...

CVE-2004-1099: Undefined Security Weakness

Cisco Secure Access Control Server for Windows ACS Windows and Cisco Secure Access Control Server Solution Engine ACS Solution Engine 3.3.1, when the EAP-TLS protocol is enabled, does not properly handle expired or untrusted certificates, which allows remote attackers to bypass authentication and...

Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication Revision 1.0 For Public Release 2004 November 2 1500 UTC GMT - ---------------------------------------------------------------------- Contents Summary...

Vulnerability in Cisco Secure Access Control Server EAP-TLS Authentication

...

Unmanarc Remote Control Server (URCS) Detection

This host appears to be running Unmanarc Remote Control Server URCS. While it does have some legitimate uses, URCS may also have been installed silently as a backdoor, which may allow an intruder to gain remote access to files on the remote system. If this program was not installed for remote...